prefilter

Apr 29, 2026

Changes in this version

type EventFields

+ Comm string

+ ParentExePath string

+ Pcomm string

type Params

+ ExcludeParentProcesses map[processKey]struct{}

+ ExcludeProcesses map[processKey]struct{}

Apr 15, 2026

Changes in this version

+ type Direction uint8

+ const DirInbound

+ const DirNone

+ const DirOutbound

+ type EventFields struct

+ Dir Direction

+ DstPort uint16

+ Extracted bool

+ MethodBit MethodMask

+ Path string

+ PortEligible bool

+ func (f *EventFields) SetDirection(s string)

+ func (f *EventFields) SetMethod(method string)

+ type MethodMask uint16

+ const MethodCONNECT

+ const MethodDELETE

+ const MethodGET

+ const MethodHEAD

+ const MethodOPTIONS

+ const MethodPATCH

+ const MethodPOST

+ const MethodPUT

+ const MethodTRACE

+ type Params struct

+ Dir Direction

+ IgnorePrefixes []string

+ IncludePrefixes []string

+ MethodMask MethodMask

+ Ports []uint16

+ func ParseWithDefaults(ruleState map[string]any, bindingParams map[string]any) *Params

+ func (p *Params) ShouldSkip(e EventFields) bool